Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/34352e3137382e3231342e302f32342d3234203d3e20323639313131.roa
File:                     34352e3137382e3231342e302f32342d3234203d3e20323639313131.roa (raw, json)
Hash identifier:          nhyiUGXTxwIjVUCTXam7BMyiIAVyiCb9KH0znWQnrRo=
Subject key identifier:   74:66:7B:CF:63:BC:73:59:3A:FB:54:37:1A:42:E8:E1:97:86:44:85
Certificate issuer:       /CN=6B5D42D93E58C00245A6501E9C01C833BB782217
Certificate serial:       5D1650B9CAD0ACA9E77C55DD7DB9BC634673D6F8
Authority key identifier: 6B:5D:42:D9:3E:58:C0:02:45:A6:50:1E:9C:01:C8:33:BB:78:22:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B5D42D93E58C00245A6501E9C01C833BB782217.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/34352e3137382e3231342e302f32342d3234203d3e20323639313131.roa
Signing time:             Wed 03 Apr 2024 23:23:19 +0000
ROA not before:           Wed 03 Apr 2024 23:18:19 +0000
ROA not after:            Wed 02 Apr 2025 23:23:19 +0000
asID:                     269111
IP address blocks:        45.178.214.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/6B5D42D93E58C00245A6501E9C01C833BB782217.crl
                          rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/6B5D42D93E58C00245A6501E9C01C833BB782217.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B5D42D93E58C00245A6501E9C01C833BB782217.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:39:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:16:50:b9:ca:d0:ac:a9:e7:7c:55:dd:7d:b9:bc:63:46:73:d6:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B5D42D93E58C00245A6501E9C01C833BB782217
        Validity
            Not Before: Apr  3 23:18:19 2024 GMT
            Not After : Apr  2 23:23:19 2025 GMT
        Subject: CN=74667BCF63BC73593AFB54371A42E8E197864485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7b:50:65:5c:cc:ec:99:0c:6b:8b:39:40:fe:
                    01:30:b6:d2:4d:ee:e6:cc:9e:b9:21:c8:5b:25:71:
                    eb:b6:72:f8:31:ca:f2:eb:e5:73:ac:a7:31:87:0c:
                    b6:ab:68:8f:29:dc:44:06:2c:7a:f0:5f:e0:7b:bc:
                    1c:7e:44:47:cc:65:ad:f0:0f:37:57:a0:a7:6e:2a:
                    85:a6:43:92:25:8f:55:2f:c5:34:3f:2b:5d:25:95:
                    b3:31:b1:61:c3:6f:e7:14:da:38:78:bb:63:c4:42:
                    8a:04:74:ee:8d:aa:a6:07:0d:30:94:e0:5e:28:9f:
                    ee:db:b8:92:9b:b3:a4:2a:d7:b5:55:31:0b:15:8f:
                    33:65:a2:6d:ed:5f:55:8d:45:5d:3f:6c:fa:db:b2:
                    ba:10:86:54:8e:a4:46:24:52:72:8c:60:39:d3:8e:
                    f4:9d:c4:0b:64:b2:ea:9d:5d:d3:ab:f3:27:d5:69:
                    5d:9a:d9:fb:2f:71:e9:ef:21:fa:ed:6e:cf:b5:c7:
                    f5:e9:3c:6b:fb:39:f2:36:ae:1a:cb:16:c7:a3:ef:
                    6b:58:2d:c7:c9:93:63:45:37:8f:35:13:8d:f9:87:
                    9a:0d:c7:8b:8e:79:ae:ec:fa:1f:29:2a:c9:97:a8:
                    a4:83:3d:48:c5:1f:03:7b:f9:3c:af:e1:bf:15:39:
                    68:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:66:7B:CF:63:BC:73:59:3A:FB:54:37:1A:42:E8:E1:97:86:44:85
            X509v3 Authority Key Identifier:
                keyid:6B:5D:42:D9:3E:58:C0:02:45:A6:50:1E:9C:01:C8:33:BB:78:22:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/6B5D42D93E58C00245A6501E9C01C833BB782217.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B5D42D93E58C00245A6501E9C01C833BB782217.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/34352e3137382e3231342e302f32342d3234203d3e20323639313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:45:ba:59:f7:9c:00:57:82:50:fd:06:2f:50:4b:12:04:a6:
         1f:e0:b6:13:11:d8:bd:c7:ad:3f:0a:c5:10:b6:5a:ae:65:a2:
         a9:b8:cf:a2:d6:1a:62:0e:81:25:aa:4b:65:d8:4c:59:db:ea:
         18:20:d3:a5:bd:bb:d6:7f:1c:03:c3:33:20:ad:99:5a:0e:67:
         54:49:fe:1d:9d:3d:6d:fe:74:e5:e2:fa:66:c7:d4:68:5b:7d:
         39:12:54:12:e1:2d:1a:67:3c:3a:7e:c5:8f:ad:99:5a:19:7a:
         0d:fb:87:ac:3f:db:2f:76:9b:a5:5c:8a:9b:c2:5a:69:19:f1:
         0a:3d:19:1d:c3:6a:86:12:46:3a:ad:95:b7:a9:97:3d:63:2d:
         9e:de:07:25:87:2c:4a:f4:b9:dd:2f:e7:d4:8f:21:a1:57:9d:
         7f:85:99:27:19:b9:d0:dd:a6:d7:5d:30:44:ea:e8:6d:be:04:
         15:dc:8a:e6:77:12:ba:6f:62:c0:08:39:3d:4e:e1:c3:17:f4:
         7a:b6:ba:ed:a7:c6:5f:c1:50:ce:0b:22:f3:2e:52:46:f9:b3:
         2a:36:aa:4b:d8:af:59:49:5c:22:04:9e:da:79:78:9c:fe:4e:
         2c:10:ba:75:7b:0e:ff:d7:f6:14:a3:75:b0:75:2a:65:ec:19:
         01:dd:35:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:11 2024 by rpki-client on console-fra.rpki-client.org